The Standard

Summary

Chainlink's latestRoundData may return stale result

Vulnerability Details

The contract uses Chailink to fetch prices of assets. It uses the Chainlink's latestRoundData method. However, the return data of the method is not checked for stale prices.

It's possible Chainlink returns old prices for different reasons such as the system being down or under attack or finding it difficult to return fresh prices due to congestion.

Impact

Stale prices can be used to calculate assets prices which can result to loss for the protocol and its users.

Tools Used

Manual review

Recommendations

Check the return prices to ensure it's not stale.